General
-
Target
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8
-
Size
747KB
-
Sample
220216-2sndeafcam
-
MD5
87239ce48fc8196a5ab66d8562f48f26
-
SHA1
56ae990e9e55c3c842dc10d86815f3913bb408d3
-
SHA256
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8
-
SHA512
9b5a6a9d05ec673eccae33e20472bc74553aef7085cc74c984c051bdb165996ce7744de68bb122f28cfb88707d08b41fcb07681ff4ef329bf6d1e051991aeb45
Static task
static1
Behavioral task
behavioral1
Sample
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/892e099ccaacf1fd
https://mazedecrypt.top/892e099ccaacf1fd
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/8802099c70cb6511
https://mazedecrypt.top/8802099c70cb6511
Targets
-
-
Target
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8
-
Size
747KB
-
MD5
87239ce48fc8196a5ab66d8562f48f26
-
SHA1
56ae990e9e55c3c842dc10d86815f3913bb408d3
-
SHA256
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8
-
SHA512
9b5a6a9d05ec673eccae33e20472bc74553aef7085cc74c984c051bdb165996ce7744de68bb122f28cfb88707d08b41fcb07681ff4ef329bf6d1e051991aeb45
Score10/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Sets desktop wallpaper using registry
-